tina4-nodejs 3.13.88 → 3.13.89

package/CLAUDE.md

@@ -1,10 +1,10 @@
-# CLAUDE.md - AI Developer Guide for tina4-nodejs (v3.13.88)
+# CLAUDE.md - AI Developer Guide for tina4-nodejs (v3.13.89)
 
 > This file helps AI assistants (Claude, Copilot, Cursor, etc.) understand and work on this codebase effectively.
 
 ## What This Project Is
 
-Tina4 for Node.js/TypeScript v3.13.88 - The Intelligent Native Application 4ramework. A convention-over-configuration structural paradigm. The developer writes TypeScript; Tina4 is invisible infrastructure.
+Tina4 for Node.js/TypeScript v3.13.89 - The Intelligent Native Application 4ramework. A convention-over-configuration structural paradigm. The developer writes TypeScript; Tina4 is invisible infrastructure.
 
 The philosophy: zero ceremony, batteries included, file system as source of truth.
 
@@ -1244,7 +1244,7 @@ When adding new features, add a corresponding `test/<feature>.test.ts` file.
 ## v3 Features Summary
 
 - **98 built-in features**, zero third-party dependencies
-- **5,899 tests** passing across 189 files (build + typecheck green)
+- **5,916 tests** passing across 189 files (build + typecheck green)
 - **Race-safe `getNextId()`** with atomic sequence table (`tina4_sequences`) for SQLite/MySQL/MSSQL; PostgreSQL auto-creates sequences
 - **Frond template engine optimizations**: pre-compiled regexes, lazy loop context (copy-on-write), filter chain caching, path split caching, inline common filters (11-15% speedup)
 - **Production server auto-detect**: `npx tina4nodejs serve --production` auto-uses cluster mode

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tina4-nodejs",
-  "version": "3.13.88",
+  "version": "3.13.89",
   "type": "module",
   "description": "Tina4 for Node.js/TypeScript - 54 built-in features, zero dependencies",
   "keywords": [

package/packages/cli/dist/bin.js

@@ -13793,7 +13793,7 @@ function _generateFormToken(descriptor = "") {
 function _generateFormTokenValue(descriptor = "") {
   return new SafeString(_buildFormTokenJwt(descriptor));
 }
-var SafeString, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
+var SafeString, KNOWN_TAGS, TERMINATOR_TAGS, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
 var init_engine = __esm({
   "../frond/src/engine.ts"() {
     "use strict";
@@ -13805,6 +13805,37 @@ var init_engine = __esm({
         return this.value;
       }
     };
+    KNOWN_TAGS = /* @__PURE__ */ new Set([
+      "autoescape",
+      "block",
+      "cache",
+      "extends",
+      "for",
+      "from",
+      "if",
+      "import",
+      "include",
+      "live",
+      "macro",
+      "raw",
+      "set",
+      "spaceless"
+    ]);
+    TERMINATOR_TAGS = /* @__PURE__ */ new Set([
+      "elif",
+      "else",
+      "elseif",
+      "endautoescape",
+      "endblock",
+      "endcache",
+      "endfor",
+      "endif",
+      "endlive",
+      "endmacro",
+      "endraw",
+      "endset",
+      "endspaceless"
+    ]);
     JSON_UNSAFE_RE = /[<>&'\u2028\u2029]/g;
     JSON_UNSAFE_MAP = {
       "<": "\\u003c",
@@ -14459,8 +14490,11 @@ var init_engine = __esm({
                 i = skip;
               }
             } else if (tag === "set") {
+              const isBlockSet = !content.includes("=");
               if (this._sandbox && this._allowedTags !== null && !this._allowedTags.has("set")) {
-                i++;
+                i = isBlockSet ? this.skipBlock(tokens, i, "set", "endset") : i + 1;
+              } else if (isBlockSet) {
+                i = this.handleSetBlock(tokens, i, context);
               } else {
                 this.handleSet(content, context);
                 i++;
@@ -14502,6 +14536,11 @@ var init_engine = __esm({
               i++;
             } else {
               i++;
+              if (tag !== "" && !TERMINATOR_TAGS.has(tag)) {
+                throw new Error(
+                  `Frond: unknown tag "${tag}" -- known tags are: ${[...KNOWN_TAGS].sort().join(", ")}`
+                );
+              }
             }
             if (stripA && i < tokens.length && tokens[i][0] === "TEXT") {
               tokens[i] = ["TEXT", tokens[i][1].replace(LEADING_WS_RE, "")];
@@ -15398,6 +15437,47 @@ var init_engine = __esm({
         }
         return html;
       }
+      /**
+       * {% set name %}...{% endset %} -- render the body and bind it.
+       *
+       * Emits nothing itself. The captured value is a SafeString because it is
+       * template output that has already been escaped on the way in; re-escaping it
+       * at {{ name }} would double-encode every entity. Twig and Jinja2 both mark the
+       * capture safe. Returns the index just past {% endset %}.
+       */
+      handleSetBlock(tokens, start2, context) {
+        const [content] = stripTag(tokens[start2][1]);
+        const name = (content.split(/\s+/)[1] || "").trim();
+        const bodyTokens = [];
+        let i = start2 + 1;
+        let depth = 0;
+        while (i < tokens.length) {
+          if (tokens[i][0] === "BLOCK") {
+            const [tagContent] = stripTag(tokens[i][1]);
+            const tag = tagContent.split(/\s+/)[0] || "";
+            if (tag === "set" && !tagContent.includes("=")) {
+              depth++;
+              bodyTokens.push(tokens[i]);
+            } else if (tag === "endset") {
+              if (depth === 0) {
+                i++;
+                break;
+              }
+              depth--;
+              bodyTokens.push(tokens[i]);
+            } else {
+              bodyTokens.push(tokens[i]);
+            }
+          } else {
+            bodyTokens.push(tokens[i]);
+          }
+          i++;
+        }
+        if (name) {
+          context[name] = new SafeString(this.renderTokens([...bodyTokens], context));
+        }
+        return i;
+      }
       handleSpaceless(tokens, start2, context) {
         const bodyTokens = [];
         let i = start2 + 1;

package/packages/core/dist/index.js

@@ -13792,7 +13792,7 @@ function _generateFormToken(descriptor = "") {
 function _generateFormTokenValue(descriptor = "") {
   return new SafeString(_buildFormTokenJwt(descriptor));
 }
-var SafeString, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
+var SafeString, KNOWN_TAGS, TERMINATOR_TAGS, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
 var init_engine = __esm({
   "../frond/src/engine.ts"() {
     "use strict";
@@ -13804,6 +13804,37 @@ var init_engine = __esm({
         return this.value;
       }
     };
+    KNOWN_TAGS = /* @__PURE__ */ new Set([
+      "autoescape",
+      "block",
+      "cache",
+      "extends",
+      "for",
+      "from",
+      "if",
+      "import",
+      "include",
+      "live",
+      "macro",
+      "raw",
+      "set",
+      "spaceless"
+    ]);
+    TERMINATOR_TAGS = /* @__PURE__ */ new Set([
+      "elif",
+      "else",
+      "elseif",
+      "endautoescape",
+      "endblock",
+      "endcache",
+      "endfor",
+      "endif",
+      "endlive",
+      "endmacro",
+      "endraw",
+      "endset",
+      "endspaceless"
+    ]);
     JSON_UNSAFE_RE = /[<>&'\u2028\u2029]/g;
     JSON_UNSAFE_MAP = {
       "<": "\\u003c",
@@ -14458,8 +14489,11 @@ var init_engine = __esm({
                 i = skip;
               }
             } else if (tag === "set") {
+              const isBlockSet = !content.includes("=");
               if (this._sandbox && this._allowedTags !== null && !this._allowedTags.has("set")) {
-                i++;
+                i = isBlockSet ? this.skipBlock(tokens, i, "set", "endset") : i + 1;
+              } else if (isBlockSet) {
+                i = this.handleSetBlock(tokens, i, context);
               } else {
                 this.handleSet(content, context);
                 i++;
@@ -14501,6 +14535,11 @@ var init_engine = __esm({
               i++;
             } else {
               i++;
+              if (tag !== "" && !TERMINATOR_TAGS.has(tag)) {
+                throw new Error(
+                  `Frond: unknown tag "${tag}" -- known tags are: ${[...KNOWN_TAGS].sort().join(", ")}`
+                );
+              }
             }
             if (stripA && i < tokens.length && tokens[i][0] === "TEXT") {
               tokens[i] = ["TEXT", tokens[i][1].replace(LEADING_WS_RE, "")];
@@ -15397,6 +15436,47 @@ var init_engine = __esm({
         }
         return html;
       }
+      /**
+       * {% set name %}...{% endset %} -- render the body and bind it.
+       *
+       * Emits nothing itself. The captured value is a SafeString because it is
+       * template output that has already been escaped on the way in; re-escaping it
+       * at {{ name }} would double-encode every entity. Twig and Jinja2 both mark the
+       * capture safe. Returns the index just past {% endset %}.
+       */
+      handleSetBlock(tokens, start2, context) {
+        const [content] = stripTag(tokens[start2][1]);
+        const name = (content.split(/\s+/)[1] || "").trim();
+        const bodyTokens = [];
+        let i = start2 + 1;
+        let depth = 0;
+        while (i < tokens.length) {
+          if (tokens[i][0] === "BLOCK") {
+            const [tagContent] = stripTag(tokens[i][1]);
+            const tag = tagContent.split(/\s+/)[0] || "";
+            if (tag === "set" && !tagContent.includes("=")) {
+              depth++;
+              bodyTokens.push(tokens[i]);
+            } else if (tag === "endset") {
+              if (depth === 0) {
+                i++;
+                break;
+              }
+              depth--;
+              bodyTokens.push(tokens[i]);
+            } else {
+              bodyTokens.push(tokens[i]);
+            }
+          } else {
+            bodyTokens.push(tokens[i]);
+          }
+          i++;
+        }
+        if (name) {
+          context[name] = new SafeString(this.renderTokens([...bodyTokens], context));
+        }
+        return i;
+      }
       handleSpaceless(tokens, start2, context) {
         const bodyTokens = [];
         let i = start2 + 1;

package/packages/frond/dist/index.js

@@ -10,6 +10,37 @@ var SafeString = class {
     return this.value;
   }
 };
+var KNOWN_TAGS = /* @__PURE__ */ new Set([
+  "autoescape",
+  "block",
+  "cache",
+  "extends",
+  "for",
+  "from",
+  "if",
+  "import",
+  "include",
+  "live",
+  "macro",
+  "raw",
+  "set",
+  "spaceless"
+]);
+var TERMINATOR_TAGS = /* @__PURE__ */ new Set([
+  "elif",
+  "else",
+  "elseif",
+  "endautoescape",
+  "endblock",
+  "endcache",
+  "endfor",
+  "endif",
+  "endlive",
+  "endmacro",
+  "endraw",
+  "endset",
+  "endspaceless"
+]);
 function jsonText(value) {
   try {
     const text = JSON.stringify(value);
@@ -1668,8 +1699,11 @@ var Frond = class _Frond {
             i = skip;
           }
         } else if (tag === "set") {
+          const isBlockSet = !content.includes("=");
           if (this._sandbox && this._allowedTags !== null && !this._allowedTags.has("set")) {
-            i++;
+            i = isBlockSet ? this.skipBlock(tokens, i, "set", "endset") : i + 1;
+          } else if (isBlockSet) {
+            i = this.handleSetBlock(tokens, i, context);
           } else {
             this.handleSet(content, context);
             i++;
@@ -1711,6 +1745,11 @@ var Frond = class _Frond {
           i++;
         } else {
           i++;
+          if (tag !== "" && !TERMINATOR_TAGS.has(tag)) {
+            throw new Error(
+              `Frond: unknown tag "${tag}" -- known tags are: ${[...KNOWN_TAGS].sort().join(", ")}`
+            );
+          }
         }
         if (stripA && i < tokens.length && tokens[i][0] === "TEXT") {
           tokens[i] = ["TEXT", tokens[i][1].replace(LEADING_WS_RE, "")];
@@ -2607,6 +2646,47 @@ var Frond = class _Frond {
     }
     return html;
   }
+  /**
+   * {% set name %}...{% endset %} -- render the body and bind it.
+   *
+   * Emits nothing itself. The captured value is a SafeString because it is
+   * template output that has already been escaped on the way in; re-escaping it
+   * at {{ name }} would double-encode every entity. Twig and Jinja2 both mark the
+   * capture safe. Returns the index just past {% endset %}.
+   */
+  handleSetBlock(tokens, start, context) {
+    const [content] = stripTag(tokens[start][1]);
+    const name = (content.split(/\s+/)[1] || "").trim();
+    const bodyTokens = [];
+    let i = start + 1;
+    let depth = 0;
+    while (i < tokens.length) {
+      if (tokens[i][0] === "BLOCK") {
+        const [tagContent] = stripTag(tokens[i][1]);
+        const tag = tagContent.split(/\s+/)[0] || "";
+        if (tag === "set" && !tagContent.includes("=")) {
+          depth++;
+          bodyTokens.push(tokens[i]);
+        } else if (tag === "endset") {
+          if (depth === 0) {
+            i++;
+            break;
+          }
+          depth--;
+          bodyTokens.push(tokens[i]);
+        } else {
+          bodyTokens.push(tokens[i]);
+        }
+      } else {
+        bodyTokens.push(tokens[i]);
+      }
+      i++;
+    }
+    if (name) {
+      context[name] = new SafeString(this.renderTokens([...bodyTokens], context));
+    }
+    return i;
+  }
   handleSpaceless(tokens, start, context) {
     const bodyTokens = [];
     let i = start + 1;

package/packages/frond/src/engine.ts

@@ -34,6 +34,31 @@ class SafeString {
   toString() { return this.value; }
 }
 
+/**
+ * Every tag that OPENS a construct.
+ *
+ * An unknown tag is a typo, and 3.13.89 makes it throw rather than render its
+ * body: a mistyped guard -- {% iff is_admin %} instead of {% if is_admin %} --
+ * used to render the gated content UNCONDITIONALLY, so a reviewer saw a guard
+ * that was not there. Twig and Jinja2 both raise on an unknown tag; Frond now
+ * does too. There is no user-extension point for tags in any of the four
+ * frameworks, so an unknown name is always a mistake, never a plugin.
+ */
+const KNOWN_TAGS = new Set([
+  "autoescape", "block", "cache", "extends", "for", "from", "if", "import",
+  "include", "live", "macro", "raw", "set", "spaceless",
+]);
+
+/**
+ * Terminators and branch keywords. These reach the tag dispatch only when stray
+ * (their own collector consumes them in the normal case), and a stray one keeps
+ * the old render-nothing behaviour -- see the comment at the throw.
+ */
+const TERMINATOR_TAGS = new Set([
+  "elif", "else", "elseif", "endautoescape", "endblock", "endcache", "endfor",
+  "endif", "endlive", "endmacro", "endraw", "endset", "endspaceless",
+]);
+
 /**
  * Serialize a value to compact JSON text that is always valid JSON.
  *
@@ -2077,8 +2102,16 @@ export class Frond {
             i = skip;
           }
         } else if (tag === "set") {
+          // An assignment has an "="; without one this is the BLOCK form,
+          // {% set name %}...{% endset %}, which captures its rendered body. A
+          // bare includes() is exact here, not a shortcut: the block form's tag
+          // content is only ever "set <name>", so an "=" anywhere -- even inside
+          // a quoted value like {% set m = "a = b" %} -- means assignment.
+          const isBlockSet = !content.includes("=");
           if (this._sandbox && this._allowedTags !== null && !this._allowedTags.has("set")) {
-            i++;
+            i = isBlockSet ? this.skipBlock(tokens, i, "set", "endset") : i + 1;
+          } else if (isBlockSet) {
+            i = this.handleSetBlock(tokens, i, context);
           } else {
             this.handleSet(content, context);
             i++;
@@ -2120,6 +2153,16 @@ export class Frond {
           i++; // Already handled
         } else {
           i++;
+          if (tag !== "" && !TERMINATOR_TAGS.has(tag)) {
+            throw new Error(
+              `Frond: unknown tag "${tag}" -- known tags are: ${[...KNOWN_TAGS].sort().join(", ")}`,
+            );
+          }
+          // An empty tag ({%  %}) or a stray terminator (an {% endif %} with
+          // no {% if %}): no output.
+          // Malformed, but it has always rendered nothing, and nothing is the
+          // safe answer -- unlike an unknown tag it cannot expose content that
+          // was meant to be gated.
         }
 
         if (stripA && i < tokens.length && tokens[i][0] === "TEXT") {
@@ -3121,6 +3164,50 @@ export class Frond {
     return html;
   }
 
+  /**
+   * {% set name %}...{% endset %} -- render the body and bind it.
+   *
+   * Emits nothing itself. The captured value is a SafeString because it is
+   * template output that has already been escaped on the way in; re-escaping it
+   * at {{ name }} would double-encode every entity. Twig and Jinja2 both mark the
+   * capture safe. Returns the index just past {% endset %}.
+   */
+  private handleSetBlock(tokens: Token[], start: number, context: Record<string, unknown>): number {
+    const [content] = stripTag(tokens[start][1]);
+    const name = (content.split(/\s+/)[1] || "").trim();
+
+    const bodyTokens: Token[] = [];
+    let i = start + 1;
+    let depth = 0;
+    while (i < tokens.length) {
+      if (tokens[i][0] === "BLOCK") {
+        const [tagContent] = stripTag(tokens[i][1]);
+        const tag = tagContent.split(/\s+/)[0] || "";
+        if (tag === "set" && !tagContent.includes("=")) {
+          depth++;
+          bodyTokens.push(tokens[i]);
+        } else if (tag === "endset") {
+          if (depth === 0) {
+            i++;
+            break;
+          }
+          depth--;
+          bodyTokens.push(tokens[i]);
+        } else {
+          bodyTokens.push(tokens[i]);
+        }
+      } else {
+        bodyTokens.push(tokens[i]);
+      }
+      i++;
+    }
+
+    if (name) {
+      context[name] = new SafeString(this.renderTokens([...bodyTokens], context));
+    }
+    return i;
+  }
+
   private handleSpaceless(tokens: Token[], start: number, context: Record<string, unknown>): [string, number] {
     const bodyTokens: Token[] = [];
     let i = start + 1;

package/packages/orm/dist/index.js

@@ -4428,7 +4428,7 @@ function _generateFormToken(descriptor = "") {
 function _generateFormTokenValue(descriptor = "") {
   return new SafeString(_buildFormTokenJwt(descriptor));
 }
-var SafeString, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
+var SafeString, KNOWN_TAGS, TERMINATOR_TAGS, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
 var init_engine = __esm({
   "../frond/src/engine.ts"() {
     "use strict";
@@ -4440,6 +4440,37 @@ var init_engine = __esm({
         return this.value;
       }
     };
+    KNOWN_TAGS = /* @__PURE__ */ new Set([
+      "autoescape",
+      "block",
+      "cache",
+      "extends",
+      "for",
+      "from",
+      "if",
+      "import",
+      "include",
+      "live",
+      "macro",
+      "raw",
+      "set",
+      "spaceless"
+    ]);
+    TERMINATOR_TAGS = /* @__PURE__ */ new Set([
+      "elif",
+      "else",
+      "elseif",
+      "endautoescape",
+      "endblock",
+      "endcache",
+      "endfor",
+      "endif",
+      "endlive",
+      "endmacro",
+      "endraw",
+      "endset",
+      "endspaceless"
+    ]);
     JSON_UNSAFE_RE = /[<>&'\u2028\u2029]/g;
     JSON_UNSAFE_MAP = {
       "<": "\\u003c",
@@ -5094,8 +5125,11 @@ var init_engine = __esm({
                 i = skip;
               }
             } else if (tag === "set") {
+              const isBlockSet = !content.includes("=");
               if (this._sandbox && this._allowedTags !== null && !this._allowedTags.has("set")) {
-                i++;
+                i = isBlockSet ? this.skipBlock(tokens, i, "set", "endset") : i + 1;
+              } else if (isBlockSet) {
+                i = this.handleSetBlock(tokens, i, context);
               } else {
                 this.handleSet(content, context);
                 i++;
@@ -5137,6 +5171,11 @@ var init_engine = __esm({
               i++;
             } else {
               i++;
+              if (tag !== "" && !TERMINATOR_TAGS.has(tag)) {
+                throw new Error(
+                  `Frond: unknown tag "${tag}" -- known tags are: ${[...KNOWN_TAGS].sort().join(", ")}`
+                );
+              }
             }
             if (stripA && i < tokens.length && tokens[i][0] === "TEXT") {
               tokens[i] = ["TEXT", tokens[i][1].replace(LEADING_WS_RE, "")];
@@ -6033,6 +6072,47 @@ var init_engine = __esm({
         }
         return html;
       }
+      /**
+       * {% set name %}...{% endset %} -- render the body and bind it.
+       *
+       * Emits nothing itself. The captured value is a SafeString because it is
+       * template output that has already been escaped on the way in; re-escaping it
+       * at {{ name }} would double-encode every entity. Twig and Jinja2 both mark the
+       * capture safe. Returns the index just past {% endset %}.
+       */
+      handleSetBlock(tokens, start2, context) {
+        const [content] = stripTag(tokens[start2][1]);
+        const name = (content.split(/\s+/)[1] || "").trim();
+        const bodyTokens = [];
+        let i = start2 + 1;
+        let depth = 0;
+        while (i < tokens.length) {
+          if (tokens[i][0] === "BLOCK") {
+            const [tagContent] = stripTag(tokens[i][1]);
+            const tag = tagContent.split(/\s+/)[0] || "";
+            if (tag === "set" && !tagContent.includes("=")) {
+              depth++;
+              bodyTokens.push(tokens[i]);
+            } else if (tag === "endset") {
+              if (depth === 0) {
+                i++;
+                break;
+              }
+              depth--;
+              bodyTokens.push(tokens[i]);
+            } else {
+              bodyTokens.push(tokens[i]);
+            }
+          } else {
+            bodyTokens.push(tokens[i]);
+          }
+          i++;
+        }
+        if (name) {
+          context[name] = new SafeString(this.renderTokens([...bodyTokens], context));
+        }
+        return i;
+      }
       handleSpaceless(tokens, start2, context) {
         const bodyTokens = [];
         let i = start2 + 1;